Privacy policy

NISHYA – Privacy Policy

Last Updated: 15 December 2025

At NISHYA, we process your personal data in a transparent, secure, and responsible manner. This Privacy Policy has been prepared to clearly explain how your data is collected, the purposes for which it is processed, and your rights in relation to such data.

This Policy complies with the applicable data protection regulations, including the Turkish Personal Data Protection Law (PDPL), the General Data Protection Regulation (GDPR) of the European Union, and the UAE Data Protection Law.


1. Data Controller

The following details identify the party acting as the data controller responsible for the processing of your personal data:

Data Controller: NISHYA

Registered Address (Turkiye):
Seda Sabah

Zekeriyakoy Mah. Basın Yayın Sitesi Mese Sokak No: 7DG
Sarıyer – Turkiye
Tax ID No: 36373693662

Email: hello@nishyaworld.com


2. Personal Data We Collect

In order to provide our services, we may collect the following categories of personal data:

A) Identity Information

  • Full name
  • Billing and delivery details

B) Contact Information

  • Email address
  • Telephone number
  • WhatsApp communication data (upon request and consent)

C) Order Information

  • Selected Piece of Earth model
  • Bespoke measurements and personal requests
  • Payment information (encrypted; card details are not stored by NISHYA)

D) Technical Information

  • IP address
  • Cookie preferences
  • Device and session information

E) Customer Support Information

  • Enquiries and requests
  • Return, exchange, or maintenance applications


3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

  • Order creation, preparation, and delivery
    To ensure your Piece of Earth is produced in the correct size and delivered to the correct address.
  • Processing payments
    Including payment verification, invoicing, and order tracking.
  • Providing customer support
    To communicate with you via WhatsApp or email.
  • Ensuring accuracy in production processes
    Particularly for bespoke items requiring specific measurements or design details.
  • Compliance with legal obligations
    Including tax regulations, official requests, and statutory record-keeping requirements.
  • Security and prevention of misuse
    Including fraud detection and monitoring of technical issues.

NISHYA does not sell personal data to third parties under any circumstances.


4. Parties with Whom Personal Data May Be Shared

Your personal data may be shared, to the extent strictly necessary for service provision, with the following parties:

A) Shipping and logistics providers

Only data required for delivery purposes is shared.

B) Payment service providers

Payment details are processed in encrypted form by authorised payment providers. NISHYA does not store card details.

C) Legal authorities

Where disclosure is required to comply with legal obligations.

D) Technical service providers

  • Shopify infrastructure
  • Server hosting services
  • Security and protection solutions

All such providers are bound by confidentiality obligations and data protection agreements.

All data sharing is conducted in accordance with the principle of data minimisation and limited strictly to the stated purposes.


5. Where Your Data Is Stored

Personal data is stored on secure infrastructures in accordance with Shopify’s technical framework.

  • Data relating to orders placed from Turkiye is stored in compliance with Turkish legislation.
  • Data relating to orders placed from the UAE is stored in compliance with UAE data protection regulations.


6. Data Retention Periods

Personal data is retained only for the periods required by applicable laws and business purposes:

  • Order and invoice records: 10 years (statutory requirement in Turkiye)
  • Customer support communications: 3 years
  • Technical data: deleted once its purpose of use has ceased
  • Marketing consents: retained until you withdraw your consent

Where personal data is no longer necessary, it is securely deleted or anonymised.


7. Cookies

Our systems use essential technical cookies required for the operation of our services.

Optional cookies (such as performance or personalisation cookies) are activated only with your explicit consent.

For further information, please refer to: [COOKIE POLICY LINK]


8. Your Rights

Under PDPL, GDPR, and applicable UAE data protection laws, you have the right to:

  • Request information about your personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion or anonymisation of your data
  • Object to the processing of your data
  • Request data portability
  • Withdraw your explicit consent at any time
  • Lodge a complaint with the relevant supervisory authority (PDPL Authority, UAE Data Office, or GDPR supervisory bodies)

To exercise any of these rights, please contact us at:
hello@nishyaworld.com


9. Data Security

NISHYA implements appropriate technical and organisational measures to safeguard personal data, including:

  • Encryption
  • Firewalls
  • Secure server infrastructure
  • Access control restrictions
  • Regular system and security audits

Payment card details are never stored by NISHYA.


10. International Data Transfers

Due to Shopify’s infrastructure, personal data may, in certain cases, be transferred internationally.

Such transfers are conducted with appropriate safeguards in accordance with GDPR and UAE data protection requirements.


11. Amendments to This Policy

This Privacy Policy may be updated from time to time as required.

The most current version will always be available on this page.


12. Contact Information

For any questions or requests relating to privacy and personal data protection, please contact us at:

Email: hello@nishyaworld.com

Turkiye Address:
Seda Sabah

Zekeriyakoy Mah.
Basın Yayın Sitesi Mese Sokak No: 7DG
Sarıyer – Turkiye
Tax ID No: 36373693662